Privacy Policy

We collect the following categories of information:

• Account information: Your name, email address, firm name, and password (stored as a secure hash).
• Meeting transcripts and notes: Text content you upload manually, or that is automatically retrieved when you connect a supported meeting platform — Google Meet (via real-time push notifications from the Google Workspace Events API, with transcripts retrieved from Google Drive), Zoom (via recording webhook), Microsoft Teams (via Microsoft Graph webhook), or Webex (via meeting transcript webhook). The full text content of these files is read and sent to our AI provider to generate summaries.
• Connected meeting platform account data: If you connect Google, Zoom, Microsoft, or Webex, we store OAuth access and refresh tokens to retrieve transcripts on your behalf. For Google, we use the Workspace Events API to receive push notifications when a meeting ends, then retrieve only the resulting transcript from your Drive. If you configure cloud storage output, we also write branded PDF and DOCX files to the Google Drive folder you designate. For Zoom, Microsoft Teams, and Webex, we receive a webhook notification when a transcript becomes available and retrieve only that specific transcript — we do not browse your broader account, recordings, or calendar. If you configure OneDrive as a cloud storage output destination, we write branded PDF and DOCX files to the OneDrive folder you designate.
• Payment information: Billing is handled entirely by Stripe. We do not store credit card numbers or payment details on our servers.
• Usage data: Summary count, account activity, and session information for security and product improvement purposes.

• To generate AI-powered executive summaries from your meeting transcripts and notes.
• To automatically detect and process new meeting transcripts from your connected platforms (Google Meet via Workspace Events API push notifications, Zoom, Microsoft Teams, and Webex).
• To upload branded PDF and DOCX summary files to your designated Google Drive or OneDrive folder, if you have configured cloud storage output in Integrations.
• To deliver summaries and notifications via email, including DOCX and PDF attachments.
• To process payments and manage your subscription.
• To authenticate your account and maintain security.
• To improve and maintain the platform.

When you connect your Google account, Synopsist is granted permission to access Google Meet activity and Google Drive. We limit this access as follows:

• We subscribe to the Google Workspace Events API to receive a real-time push notification when one of your Google Meet meetings ends. We do not poll or monitor your account continuously.
• Upon receiving a meeting-end notification, we retrieve only the transcript file associated with that meeting from your Google Drive.
• We read the full text content of the transcript solely to generate your executive summary.
• If you configure a Cloud Storage Output folder for Google Meet in Integrations, we write branded PDF and DOCX files to that specific folder only. We do not access any other folders.
• We do not modify, delete, move, or share any of your existing Drive files.
• Synopsist platform administrators may view transcript retrieval logs and manually trigger summary generation for specific meetings. This is done solely for support and operational purposes.
• You can revoke our access at any time from your Security settings or directly from your Google Account permissions page. Revoking access deletes your stored OAuth tokens and cancels the Workspace Events subscription immediately.

Synopsist's use of Google user data is limited to the purposes described in this policy and complies with the Google API Services User Data Policy, including the Limited Use requirements.

When you connect a Zoom, Microsoft Teams, or Webex account, Synopsist's access is limited as follows:

• We receive a webhook notification from the platform only when a meeting transcript becomes available.
• We retrieve only that specific transcript — we do not browse, list, or access any other meetings, recordings, files, calendar entries, or account data.
• We read the full text content of the transcript solely to generate your executive summary.
• We do not modify, delete, or share any data within your Zoom, Microsoft, or Webex account.
• You can revoke our access at any time from your Security settings page, or directly from the platform's own connected-app permissions page. Revoking access deletes your stored OAuth tokens immediately.

We share data with the following trusted service providers solely to operate the platform:

• Anthropic: Meeting transcript text is sent to Anthropic's Claude API to generate summaries. Data is processed per Anthropic's privacy policy.
• Google: OAuth tokens are used to access your Meet Recordings folder on Google Drive. Data is processed per Google's privacy policy.
• Zoom: OAuth tokens and webhook notifications are used to retrieve meeting transcripts you've authorized. Data is processed per Zoom's privacy policy.
• Microsoft: OAuth tokens and webhook notifications are used to retrieve Microsoft Teams meeting transcripts you've authorized. Data is processed per Microsoft's privacy policy.
• Webex (Cisco): OAuth tokens and webhook notifications are used to retrieve Webex meeting transcripts you've authorized. Data is processed per Cisco's privacy policy.
• Stripe: Handles all payment processing and subscription management.
• Resend: Delivers transactional emails (welcome emails, summary notifications, password resets).
• Neon / PostgreSQL: Secure cloud database for storing your account and summary data.
• Vercel: Cloud hosting provider for our application.

We do not sell your data to any third party.

We retain your account data and summaries for as long as your account is active. If you request account deletion, we will delete your data within 30 days, except where retention is required by law. OAuth tokens are deleted immediately upon disconnecting any connected meeting platform (Google, Zoom, Microsoft Teams, or Webex).

We use industry-standard security practices including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and scoped OAuth access. However, no system is 100% secure — please use a strong, unique password for your account.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Disconnect any connected meeting platform (Google, Zoom, Microsoft Teams, or Webex) at any time from the Security settings page.
• Export or receive a copy of your summaries.

To exercise these rights, contact us at support@synopsist.pyfunctions.com.

Synopsist uses browser localStorage (not cookies) to store your authentication token. We do not use third-party tracking cookies or advertising cookies.

Synopsist is intended for professional use by financial advisors. We do not knowingly collect information from individuals under the age of 18.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how your data is handled, please contact us: